Secured Communication over 
Frequency-Selective Fading Channels: 
a practical Vandermonde precoding 

Mari Kobayashi, Merouane Debbah 
SUPELEC 
Gif-sur-Yvette, France 
Email: {mari.kobayashi,merouane.debbah} @ supelec.fr 
Shlomo Shamai (Shitz) 
Department of Electrical Engineering, Technion-Israel Institute of Technology 

Haifa, 32000, Israel 
Email: sshlomo@ee.technion.ac.il 



Abstract 

In this paper, we study the frequency-selective broadcast channel with confidential messages (BCC) 
in which the transmitter sends a confidential message to receiver 1 and a common message to receivers 
1 and 2. In the case of a block transmission of N symbols followed by a guard interval of L symbols, 
the frequency-selective channel can be modeled as a N x (N + L) Toeplitz matrix. For this special type 
of multiple-input multiple-output (MIMO) channels, we propose a practical Vandermonde precoding that 
consists of projecting the confidential messages in the null space of the channel seen by receiver 2 
while superposing the common message. For this scheme, we provide the achievable rate region, i.e. 
the rate-tuple of the common and confidential messages, and characterize the optimal covariance inputs 
for some special cases of interest. It is proved that the proposed scheme achieves the optimal degree 
of freedom (d.o.f) region. More specifically, it enables to send I < L confidential messages and N — I 
common messages simultaneously over a block of N + L symbols. Interestingly, the proposed scheme 
can be applied to secured multiuser scenarios such as the K + 1-user frequency-selective BCC with 
K confidential messages and the two-user frequency-selective BCC with two confidential messages. For 
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each scenario, we provide the achievable secrecy degree of freedom (s.d.o.f.) region of the corresponding 
frequency-selective BCC and prove the optimality of the Vandermonde precoding. One of the appealing 
features of the proposed scheme is that it does not require any specific secrecy encoding technique but 
can be applied on top of any existing powerful encoding schemes. 

I. Introduction 

We consider a secured medium such that the transmitter wishes to send a confidential message to 
its receiver while keeping the eavesdropper, tapping the channel, ignorant of the message. Wyner [1] 
introduced this model named the wiretap channel to model the degraded broadcast channel where the 
eavesdropper observes a degraded version of the receiver's signal. In this model, the confidentiality is 
measured by the equivocation rate, i.e. the mutual information between the confidential message and the 
eavesdropper's observation. For the discrete memoryless degraded wiretap channel, Wyner characterized 
the capacity-equivocation region and showed that a non-zero secrecy rate can be achieved [1]. The most 
important operating point on the capacity-equivocation region is the secrecy capacity, i.e. the largest 
reliable communication rate such that the eavesdropper obtains no information about the confidential 
message (the equivocation rate is as large as the message rate). The secrecy capacity of the Gaussian 
wiretap channel was given in [2]. Csiszar and Korner considered a more general wiretap channel in which 
a common message for both receivers is sent in addition to the confidential message [3]. For this model 
known as the broadcast channel with confidential messages (BCC), the rate-tuple of the common and 
confidential messages was characterized. 

Recently, a significant effort has been made to opportunistically exploit the space/time/user dimensions 
for secrecy communications (see for example [4], [5], [6], [7], [8], [9], [10], [11], [12], [13], [14] and 
references therein). In [4], the secrecy capacity of the ergodic slow fading channels was characterized and 
the optimal power/rate allocation was derived. The secrecy capacity of the parallel fading channels was 
given [6], [7] where [7] considered the BCC with a common message. Moreover, the secrecy capacity 
of the wiretap channel with multiple antennas has been studied in [8], [9], [10], [11], [12], [13], [15] 
and references therein. In particular, the secrecy capacity of the multiple-input multiple-output (MIMO) 
wiretap channel has been fully characterized in [14], [5], [11], [12] and more recently its closed-form 
expressions under a matrix covariance constraint have been derived in [15]. Furthermore, a large number 
of recent works have considered the secrecy capacity region for more general broadcast channels. In 
[16], the authors studied the two-user MIMO Gaussian BCC where the capacity region for the case of 
one common and one confidential message was characterized. The two-user BCC with two confidential 
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messages, each of which must be kept secret to the unintended receiver, has been studied in [17], [18], 
[19], [20]. In [18], Liu and Poor characterized the secrecy capacity region for the multiple-input single- 
output (MISO) Gaussian BCC where the optimality of the secret dirty paper coding (S-DPC) scheme was 
proved. A recent contribution [19] extended the result to the MIMO Gaussian BCC. The multi-receiver 
wiretap channels have been also studied in [21], [22], [23], [24], [25], [26] (and reference therein) where 
the confidential messages to each receiver must be kept secret to an external eavesdropper. It has been 
proved that the secrecy capacity region of the MIMO Gaussian multi-receiver wiretap channels is achieved 
by S-DPC [26], [24]. 

However, very few work have exploited the frequency selectivity nature of the channel for secrecy 
purposes [27] where the zeros of the channel provide an opportunity to "hide" information. This paper 
shows the opportunities provided by the broad-band channel and studies the frequency-selective BCC 
where the transmitter sends one confidential message to receiver 1 and one common message to both 
receivers 1 and 2. The channel state information (CSI) is assumed to be known to both the transmitter 
and the receivers. We consider the quasi-static frequency-selective fading channel with L + 1 paths such 
that the channel remains fixed during an entire transmission of n blocks for an arbitrary large n. It 
should be remarked that in general the secrecy rate cannot scale with signal-to-noise ratio (SNR) over 
the channel at hand, unless the channel of receiver 2 has a null frequency band of positive Lebesgue 
measure (on which the transmitter can "hide" the confidential message). In this contribution, we focus 
on the realistic case where receiver 2 has a full frequency band (without null sub-bands) but operates in 
a reduced dimension due to practical complexity issues. This is typical of current orthogonal frequency 
division multiplexing (OFDM) standards (such as IEEE802.11a/WiMax or LTE [28], [29], [30]) where a 
guard interval of L symbols is inserted at the beginning of each block to avoid the inter-block interference 
and both receivers discard these L symbols. We assume that both users have the same standard receiver, 
in particular receiver 2 cannot change its hardware structure. Studying secure communications under this 
assumption is of interest in general, and can be justified since receiver 2 is actually a legitimate receiver 
which can receive a confidential message in other communication periods. Of course, if receiver 2 is able 
to access the guard interval symbols, it can extract the confidential message and the secrecy rate falls 
down to zero. Although we restrict ourselves to the reduced dimension constraint in this paper, other 
constraints on the limited capability at the unintended receiver such as energy consumption or hardware 
complexity might provide a new paradigm to design physical layer secrecy systems. 

In the case of a block transmission of ./V symbols followed by a guard interval of L symbols discarded 
at both receivers, the frequency-selective channel can be modeled as a N x (N + L) MIMO Toeplitz 
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matrix. In this contribution, we aim at designing a practical linear precoding scheme that fully exploits the 
degrees of freedom (d.o.f.) offered by this special type of MIMO channels to transmit both the common 
message and the confidential message. To this end, let us start with the following remarks. One one hand, 
the idea of using OFDM modulation to convert the frequency-selective channel represented by the Toeplitz 
matrix into a set of parallel fading channel turns out to be useless from a secrecy perspective. Indeed, it 
is known that the secrecy capacity of the parallel wiretap fading channels does not scale with SNR [7]. 
On the other hand, recent contributions [14], [5], [11], [12], [15] showed that the secrecy capacity of the 
MIMO wiretap channel grows linearly with SNR, i.e. r log SNR where r denotes the secrecy degree of 
freedom (s.d.o.f.) (to be specified). In the high SNR regime, the secrecy capacity of the MISO/MIMO 
wiretap channel is achieved by sending the confidential message in the null space of the eavesdropper's 
channel [10], [14], [11], [18], [19], [15]. Therefore, OFDM modulation is highly suboptimal in terms of 
the s.d.o.f.. 

Inspired by these remarks, we propose a linear Vandermonde precoder that projects the confidential 
message in the null space of the channel seen by receiver 2 while superposing the common message. 
Thanks to the orthogonality between the precoder of the confidential message and the channel of receiver 
2, receiver 2 obtains no information on the confidential message. This precoder is regarded as a single- 
antenna frequency beamformer that nulls the signal in certain directions seen by receiver 2. The Vander- 
monde structure comes from the fact that the frequency beamformer is of the type [1, a^, af, af +L ] T 
where ai is one of the roots of the channel seen by receiver 2. Note that Vandermonde matrices [31] have 
already been considered for cognitive radios [32] and CDMA systems [33] to reduce/null interference 
but not for secrecy applications. One of the appealing aspects of Vandermonde precoding is that it does 
not require a specific secrecy encoding technique but can be applied on top of any classical capacity 
achieving encoding scheme. 

For the proposed scheme, we characterize its achievable rate region, the rate-tuple of the common 
message, the confidential message, respectively. Unfortunately, the optimal input covariances achieving its 
boundary is generally difficult to compute due to the non-convexity of the weighted sum rate maximization 
problem. Nevertheless, we show that there are some special cases of interest such as the secrecy rate and 
the maximum sum rate point which enable an explicit characterization of the optimal input covariances. In 
addition, we provide the achievable d.o.f. region of the frequency-selective BCC, reflecting the behavior 
of the achievable rate region in the high SNR regime, and prove that the Vandermonde precoding achieves 
this region. More specifically, it enables to simultaneously transmit I streams of the confidential message 
and N — I streams of the common message for I < L simultaneously over a block of N + L dimensions. 
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Fig. 1. Frequency-selective broadcast channels with confidential messages. 



Interestingly, the proposed Vandermonde precoding can be applied to multiuser secure communication 
scenarios; a) a K + 1-user frequency-selective BCC with K confidential messages and one common 
message, b) a two-user frequency-selective BCC with two confidential messages and one common 
message. For each scenario, we characterize the achievable s.d.o.f. region of the corresponding frequency- 
selective BCC and show the optimality of the Vandermonde precoding. 

The paper is organized as follows. Section JI] presents the frequency-selective fading BCC. Section 
mn introduces the Vandermonde precoding and characterizes its achievable rate region as well as the 
optimal input covariances for some special cases. Section[TV] provides the application of the Vandermonde 
precoding to the multi-user secure communications scenarios. Section [V] some numerical examples of the 
proposed scheme in the various settings, and finally Section [Vl] concludes the paper. 

Notation : In the following, upper (lower boldface) symbols will be used for matrices (column 
vectors) whereas lower symbols will represent scalar values, (.) T will denote transpose operator, (.)* 
conjugation and {.) H = ((.) T )* hermitian transpose. I n ,0 nxm represents the n x n identity matrix, 
nxm zero matrix. |A|,rank(A),tr(A) denotes a determinant, rank, trace of a matrix A, respectively. 
x n denotes the sequence (x[l], . . . , x[n]). w, u, v, x, y, z denotes the realization of the random variables 
W, U, V, X, Y, Z. Finally, " <" denotes less or equal to in the positive semidefinite ordering between 
positive semidefinite matrices, i.e. we have A < B if B — A is positive semidefinite. 
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II. System Model 

We consider the quasi-static frequency-selective fading BCC illustrated in Fig. [TJ The received signal 



y[t},z[t] eC 



TVxl 



of receiver 1, 2 at block t is given by 
y[t] = T(h)x[t] + n[i] 
z[t] = T(g)x[t] + i/[t], t = l,...,n 



(1) 



where T(h),T(g) denotes a x (N + L) Toeplitz matrix with the L + 1-path channel vector h = 
[h^, . . . , ho] of user 1, g = [<?£, . . . ,go] of user 2, respectively, x[t] G C^ +i ^ xl denotes the transmit 
vector, and finally n[t],f[t] ~ 3sfg(0, Ijv) are mutually independent additive white Gaussian noise 
(AWGN). The input vector is subject to the power constraint given by 

n 

-J>[t]*x[t]<P 



(2) 



t=i 



where we let P = (N + L)P. The structure of T(h) is given by 

h L ■■■ h Q ••• 



7(h) = 







: 
•■■ h L ■■■ h 
We assume that the channel matrices T(h),T(g) remain constant for the whole duration of the trans- 
mission of n blocks and are known to all terminals. At each block t, we transmit N + L symbols by 
appending a guard interval of size L <^ N larger than the delay spread, which enables to avoid the 
interference between neighbor blocks. 

The transmitter wishes to send a common message message Wq to two receivers and a confidential 
message W\ to receiver 1. A (2 nRa , 2 nRl , n) code consists of the following : 1) two message sets 
Wo = {1, . . . , 2 nRo } and Wi = {1, . . . , 2 nRl } with the messages Wo, W\ uniformly distributed over the 
sets Wo,Wi, respectively ; 2) a stochastic encoder that maps each message pair (wq,w\) £ ("Wo,'Wi) 
to a codeword x n ; 3) One decoder at receiver 1 that maps a received sequence y n to a message 
pair (w^, wi) S (Wo,Wi) and another at receiver 2 that maps a received sequence z n to a message 



{ 2) G W . The average error probability of a [2 nR ° , 2 nRl , n) code is defined as 



where P™(wq,wi) denotes the error probability when the message pair (wo,wi) is sent defined by 



P™{wo,wi) = Pr Uw^^wx) + (w ,wx) UiiJ 2 ' ^ w 



(4) 
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The secrecy level of the confidential message W\ at receiver 2 is measured by the equivocation rate 
R e defined as 

Re^-HiW^) (5) 
n 

which is the normalized entropy of the confidential message conditioned on the received signal at receiver 
2 and available CSI. 

A rate-equivocation tuple (R , R\,R e ) is said to be achievable if for any e > there exists a sequence 
of codes (2 nRo , 2 nRl , n) such that, we have 

P2 < e 

Ri-Re < e (6) 

In this paper, we focus on the perfect secrecy case where receiver 2 obtains no information about the 
confidential message W\, which is equivalent to R e = R\. In this setting, an achievable rate region 
(i?0) R\) of the general BCC (expressed in bit per channel use per dimension) is given by [3] 

e s = |J l(R ,R 1 ) :Ro < 1 ^ m m{I(U;Y)J(U;Z)},R 1 < 1 ^[I(V;Y\U)-I(V-,Z\U)]\ 

where the union is over all possible distribution U, V, X satisfying [20, Lemma 1] 

U, V -> X -> Y, Z (8) 

where U might be a deterministic function of V. Recently, the secrecy capacity region Q s of the two-user 
MIMO-BCC (fl} was characterized in [16] and is given by all possible rate tuples (Rq,Rx) satisfying 

1 f |I + HSH H | , |I + GSG H n 

Ro < Him < lOET =7- , log — — T7- > (9) 

U ~ N + L \ S |I + HKH^|' S |I + GKG^|J KJ 

Ri < — ^-[log|I + HKH H |-log|I + GKG^|] (10) 

1\ -\- Lt 

for some -< K < S with S denotes the input covariance satisfying tr(S) < P and H, G denotes the 
channel matrix of receiver 1, 2, respectively. Obviously, when only the confidential message is transmitted 
to receiver 1, the frequency-selective BCC £T|) reduces to the MIMO flat-fading wiretap channel whose 
secrecy capacity has been characterized in [14], [10], [12], [11], [15]. In particular, Bustin et al. derived its 
closed-form expression under a power-co variance constraint [15]. Under a total power (trace) constraint, 
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the secrecy capacity of the MIMO Gaussian wiretap channel is expressed as [19, Theorem 3] 








r 

U E 1 ^ 



en) 



Sho ; tr(S)<Pi =1 

where {cf)j} r j =1 are the generalized eigen- values greater than one of the following pencil 



(i + S^HH^S 1 / 2 , 1 + S^GG^S 1 / 2 ) . 



(12) 



As explicitly characterized in [15, Theorem 2], the optimal input covariance achieving the above region is 
chosen such that the confidential message is sent over r sub-channels where receiver 1 observes stronger 
signals than receiver 2. Moreover, in the high SNR regime the optimal strategy converges to beamforming 
into the null subspace of G [14], [5], [11], [12] as for the MISO case [14], [18]. In order to characterize 
the behavior of the secrecy capacity region in the high SNR regime, we define the d.o.f. region as 



where r\ denotes s.d.o.f. which corresponds precisely to the number r of the generalized eigen-values 
greater than one in the high SNR. 



For the frequency-selective BCC specified in Section UH. we wish to design a practical linear precoding 
scheme which fully exploits the d.o.f. offered by the frequency-selective channel. We remarked previously 
that for a special case when only the confidential message is sent to receiver 1 (without a common 
message), the optimal strategy consists of beamforming the confidential signal into the null subspace 
of receiver 2. By applying this intuitive result to the special Toeplitz MIMO channels T(h),T(g) while 
including a common message, we propose a linear precoding strategy named Vandermonde precoding. 
Prior to the definition of the Vandermonde precoding, we provide some properties of a Vandermonde 
matrix [31]. 

Property 3.1: Given a full-rank Toeplitz matrix T(g) € (£ Nx ( N + L ) > there exists a Vandermonde matrix 

'in [15], [19] the authors consider the real matrices H, G. Nevertheless, it is conjectured that for complex matrices the 
following expression without 1/2 in the pre-log holds. 




(13) 



III. Vandermonde precoding 
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Vi G 



-L)xi f or / < ^ whose structure is given by 

1 



Vi 



ai 



N+L-l 

h 



(14) 



where {ai, . . . , a/} are the / < L roots of the polynomial S(z) = ^2i = o9i zL % with L + l coefficients 
of the channel g. Clearly Vi satisfies the following orthogonal condition 



%)Vi = 



Nxl 



(15) 



and rank(Vi) = I if oi, 02, . . . , a\ are all different. 

It is well-known that as the dimension of N and L increases, the Vandermonde matrix Vi becomes 
ill-conditioned unless the roots are on the unit circle. In other words, the elements of each column either 
grow in energy or tend to zero [31]. Hence, instead of the brut Vandermonde matrix ([141 . we consider a 
unitary Vandermonde matrix obtained either by applying the Gram-Schmidt orthogonalization or singular 
value decomposition (SVD) on T(g). 

Definition 1: We let Vi be a unitary Vandermonde matrix obtained by orthogonalizing the columns 
of Vi. We let V G £,{n+l)x{n+l-1) be a unitary matrix in the null space of Vl such that V^Vi = 0. 

The common message Wq, the confidential message W±, is sent along Vo,Vi, respectively. We call 
V = [V , Vi] € C {N+L)X{N+L) Vandermonde precoder. 

Further, the precoding matrix Vi for the confidential message satisfies the following property. 

Lemma 1: Given two Toeplitz matrices T(h),T(g) where h, g are linearly independent, there exists a 
unitary Vandermonde matrix Vi G (^{N+L)y.i f or q < Z < L satisfying 



T(g)Vi = O^vx,, 
rank(T(h)Vi) = I. 



(16) 



(17) 

Proof: Appendix J] □ 
In order to send the confidential message intended to receiver 1 as well as the common message to 
both receivers over the frequency-selective channel £[]), we consider the Gaussian superposition coding 
based on the Vandermonde precoder of Definition Q] Namely, at block t, we form the transmit vector as 



x[t] = V uo[t]+Viui[t] 



(18) 



June 17, 2009 



DRAFT 



10 



$L S = cov 



where the common message vector Uo[t] and the confidential message vector ui[t] are mutually inde- 
pendent Gaussian vectors with zero mean and covariance So, Si, respectively. Under this condition, the 
input covariances subject to 

tr(S )+tr(S 1 ) <P (19) 

satisfy the power constraint Q. We let 3~ denote the feasible set (So, Si) satisfying ( [191 . 
Theorem 1: The Vandermonde precoding achieves the following secrecy rate region 

(i?o, Ri) ■ 

e> ^ 1 rir.0. |Ijv+H n S H f f +HiSiHf | , | T r o r>H\\ \ HQ) 

k i?i < TvTllogllTv + HiSiHf | J 
where cov denotes the convex-hull and we let Ho = T(h)Vo,Hi = T(h)Vi,Go = T(g)Vo. 

Proof: Due to the orthogonal property ([161 ) of the unitary Vandermonde matrix, receiver 2 only 
observes the common message, which yields the received signals given by 

y = T(h)V u + T(h)Vim + n (21) 
z = T(g)V u + v 

where we drop the block index. We examine the achievable rate region "X s of the Vandermonde precoding. 
By letting the auxiliary variables U = VoUo, V = U + ViUi and X = V, we have 

I{U . Y) = 1 lQg \In + T(h)VoSoV^T(h) g + 7(h)ViSiVf 7(h) H \ 



N + L b |Ijv + 7(h)ViSiVfT(h) ff | 

I(U;Z) = -L-log\l N + 7(g)V S V^7(g) H \ 

I(V;Y\U) = ^- I log|lj V + 0'(h)V 1 SiVfO'(h) ff | 
I(V;Z\U) = 

Plugging these expressions to (O, we obtain (l20l ). □ 
The boundary of the achievable rate region of the Vandermonde precoding can be characterized by 
solving the weighted sum rate maximization. Any point (Rq, R*) on the boundary of the convex region 
"Jl s is obtained by solving 

max 70-R0 + 71-R1 (22) 

for non-negative weights 70,71 satisfying 70 + 71 = 1. When the region 3l s , obtained without convex 
hull, is non-convex, the set of the optimal covariances (Sq, ) achieving the boundary point might not 
be unique. Fig. |2] depicts an example in which the achievable rate region Jl s is obtained by the convex 
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hull operation on the region 0l s , i.e. replacing the non-convex subregion by the line segment A,B. For 
the weight ratio 71/70 corresponding to the slope of the line segment A,B, there exist two optimal sets 
of the covariances yielding the points A and B (which clearly dominate the point C). These points are the 
solution to the weighted sum rate maximization (l22l) . In summary, an optimal covariance set achieving 
(l22l) (might not be unique) is the solution of 

max 7o-Ro + 7i-Ri= max 70 mm{i?oi, -R02} + JxRi (23) 



where we let 



c / c n 1 , |Ijv + HoSoH^ + HiSiHf| 

#01(00, Si) = — — — log- 



N + L 6 |Ijv + HiSiHf| 

#02(S ) = log |Ijv + G S G£| 

fli(Si) = -^^loglljvr + HiSiHfl 

Following [34, Section II-C] (and also [7, Lemma 2]), we remark that the solution to the max-min 
problem (l23l can be found by hypothesis testing of three cases, Rqi < R02, R02 < R01, and Rq% = i?02- 
Formally, we have the following lemma. 

Lemma 2: The optimal (Sq, S*), solution of d23l) . is given by one of the three solutions. 

1) Case 1 : (Sq, S*) maximizes 

t o \ 1 11^ + HiSiHf + HoSoH^I 1 H , 

/i(S ,Si) = 70 log — — — m — +7ilog|lAr + H1S1H! | (24) 

l-i-JV + *ii»i±l 1 

and satisfies R m (%,S\) < R 02 (S* 1 ). 
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2) Case 2 : (Sq, S*) maximizes 

/ 2 (S , Si) = 70 log |Ijv + GoSoG^j + 7l log |Ijv + HiSiHf | 

and satisfies Ro 2 (S*) < i2oi(Sg,SJ). 

3) Case 3 : (Sq, S*) maximizes 

|Ijv + HiSiH^ + HqSoHq^ 1 



(25) 



/3(Sq) Si 



70 



eiog 



|Ijv + HiSiHf| 
+7i log lljv + HxSxHf I 



+ (1 



log Ijv + GnSnG 



H I 
O^O^O 



(26) 



and satisfies i?oi(So, S*) = i?02(S*) for some < < 1. 
Before considering the weighted sum rate maximization d23l . we apply SVD to Hi e C Nxl , Go € 

£Nx(N+L-l) 



U h iA hl V hl 



H 



(27) 



H 



Hi 

Go = U ff oA 9 oV 5 _ 

where V hl ,V g0 6 C WxAf , V M e C' xZ , and V 90 € c (JV+l-«)x(at+l-«) ar£ unitary) A/a,A fl o contain 
positive singular values {y^ 1 }' =1 , {y^ Af°}^j L ~', respectively. Following [7, Theorem 3], we apply 
Lemma |2] to solve the weighted sum rate maximization. 

Theorem 2: The set of the optimal covariances (Sq, achieving the boundary of the achievable rate 
region 5l s of the Vandermonde precoding, corresponds to one of the following three solutions. 

1) Case 1 :(S£,S£) = (Sj,Sj), if (Sj,Sj), solution of the following KKT conditions, satisfies 
^oi (S , S\) < R 2(S\)- 

7oH ^r- 1 H + * = ^n+l-i (28) 
70 Hf I^Hi + (71 - 7b)Hf (Ijv + H1S1H? )" 1 Hi + *i = ^ (29) 



where tr(\I/jSj) = with a positive semidefinite for i = 0, 1, // > is determined such that 
tr(S ) + tr(Si) = P, and we let T = 1 N + H S H^ + HiSiHf . 
2) Case 2 :(S*,S£) = (Sg.S?) if the following (Sg,S?) fulfills i? 2(S?) < floi(Sg,S?). 

We let Sq = V g0 S V^ and Sf = V/jiSiV^ where So, Si are diagonal with the i-th element 
given by 



P0,i = 


7o 
A* 


1 


Pl,i = 


~7i _ 
_ A* 


1 



l,...,iV + L-Z 



(30) 
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where fi > is determined such that Yli=i_ L 1 Po,i + Si=iPM = ■ 
3) Case 3 : (SJJ, S£) = (Sg,Sf), if (Sg,S?), solution of the following KKT conditions, satisfies 
i$ 2 (S?) = ^(Sg, Sf) for some < 9 < 1. 

flH^r^Ho + (1 - 9)G» (l N + GoSoG^)" 1 G + *o = ^n+l-i (31) 
70 (9Hf r-^i + ( 7l - 7 o^)Hf (Ijv + HiSiHf ) _1 Hi + *i = fAi (32) 

where tr(\&jSj) = with a positive semidefinite for i = 0, 1, // > is determined such that 
tr(S )+tr(Si) = P. 

Proof: Appendix HH □ 
Remark 3.1: Due to the non-concavity of the underlying weighted sum rate functions, it is generally 
difficult to characterize the boundary of the achievable rate region Jl s except for some special cases. The 
special cases include the corner points, in particular, the secrecy rate for the case of sending only the 
confidential message (71 = 1), as well as the maximum sum rate point for the equal weight case (70 = 71). 
It is worth noticing that under equal weight the objective functions in three cases are all concave in So, Si 
since f\ is concave if 71 > 70 and ^3 is concave if 71 > 70$ and < 9 < 1. 

The maximum sum rate point 70 = 71 can be found by applying the following greedy search [7]. 
Greedy search to find the maximum sum rate point 

1) Find So, Si maximizing f\ and check i?02 < Roi- If yes stop. Otherwise go to 2). 

2) Find So, Si maximizing / 2 and check i?oi < ^01 • If ves stop. Otherwise go to 3). 

3) Find So, Si maximizing ^3 and check R e m = for some < 9 < 1. 

For the special case of 71 = 1, Theorem |2] yields the achievable secrecy rate with the Vandermonde 
precoding. 

Corollary 3.1: The Vandermonde precoding achieves the secrecy rate 

Rf m = max _^^l og det(l JV + T(h)ViSiVfT(h) H ) (33) 
Si:tr(Si)<P + L, 

8=1 

where the last equality is obtained by applying SVD to Hi = 7(h) Vi and plugging the power allocation 
of (1301 ) with 70 = 0, 71 = 1, \i is determined such that Y^i=iPu — P- 

Finally, by focusing the behavior of the achievable rate region in the high SNR regime, we characterize 
the achievable d.o.f. region of the frequency-selective BCC ([I]). 
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Theorem 3: The d.o.f. region of the frequency-selective BCC £[]) with (N + L) x L Toeplitz matrices 
T(h),T(g) is given as a union of (r ,ri) = jA^(lo,l) satisfying 

I < L (34) 

l + I < N (35) 

where lo,l denote non-negative integers. The Vandermonde precoding achieves the above d.o.f. region. 

Proof: The achievability follows rather trivially by applying Theorem Q] By considering equal power 
allocation over all N + L streams such that So = PIn+l-i, Si = PIi, we obtain the rate tuple (Rq, R\) 
where Ro < min(i?oi, R02) 

„ 1 . \I N + P7(h)V V^7(h) H + P7(h)ViV?7(h) H \ 

it i = Ar , r log ■ 



N + L \I N + P7(h) Vi Vf 7(h) H I 

^02 = ^^logllAr + P^VoV^g)^! 

Ri < j^-j-\og\l N + P7(h)V 1 V^7(h) H \ 

We first notice that the pre-log factor of log |I + PA\ as P — > 00 depends only on the rank of A. From 
Lemma [U we obtain 

rank(T(h)ViVf 7{h) H ) = rank(T(h)Vi) = I (36) 

rank(T(g)V V ff T(g) ff ) = rank(T(g)V ) 

( => rank(T(g)[V V 1 ]) 

( = } rank(T(g)) = N (37) 

rank(T(h)(V V^ + ViVf )7(h) H ) = rank (7(h) W H 7(h) H ) 

= rank(T(h)) = N (38) 
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where (a) follows from orthogonality between T(g) and Vi, (b) follows from the fact that V = [VnVi] 
is unitary satisfying VV H = I. Notice that (l36l ) yields n = N l +L - For the d.o.f. ro = 7^7; of the 
common message, (1361 ) and (|38l ) yield 

Z = rank(T(h)(V V^ + V 1 \f)7(h) H ) - rank(T(h)Vi Vf T(h) ff ) = JV - I (39) 

which is dominated by the pre-log of i?02 in (f3VT >. This establishes the achievability. 

The converse follows by noticing that the inequalities (l34l) and (l35l) correspond to trivial upper bounds. 
The first inequality d34l) corresponds to the s.d.o.f. of the MIMO wiretap channel with the legitimate 
channel 7(h) and the eavesdropper channel 7(g), which is bounded by L. The second inequality (l35T ) 
follows because the total number of streams for receiver 1 cannot be larger than the d.o.f. of 7(h), i.e. 
N. □ 

Fig. [3] illustrates the region (/, Iq) of the frequency-selective BCC over N + L dimensions. We notice 
that the s.d.o.f. constraint (l34l yields the line segment A, B while the constraint (|35T ) in terms of the total 
number of streams for receiver 1 yields the line segment B,C. 

IV. Multi-user secure communications 

In this section, we provide some applications of the Vandermonde precoding in the multi-user secure 
communication scenarios where the transmitter wishes to send confidential messages to more than one 
intended receivers. The scenarios that we address are ; a) a K + 1-user frequency-selective BCC with 
K confidential messages and one common message, b) a two-user frequency-selective BCC with two 
confidential messages and one common message. For each scenario, by focusing on the behavior in 
the high SNR regime, we characterize the achievable s.d.o.f. region and show the optimality of the 
Vandermonde precoding. 

A. K+ 1-user BCC with K confidential messages 

As an extension of Section JIIJ we consider the K + 1-user frequency-selective BCC where the 
transmitter sends K < L confidential messages W\ , . . . , Wk to the first K receivers as well as one 
common message Wq to all receivers. Each of the confidential messages must be kept secret to receiver 
K + 1. Notice that this model, called multi-receiver wiretap channel, has been studied in the literature 
([25], [26], [23], [24], [22], [20] and reference therein). In particular, the secrecy capacity region of 
the Gaussian MIMO multi-receiver wiretap channel has been characterized in [26], [24] for K = 2, an 
arbitrary K, respectively, where the optimality of the S-DPC is proved. 
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The received signal of receiver k and the received signal z of receiver K + 1 at any block are given 

by 

y k = T(h fc )x + n fe , k = l,...,K (40) 

z = T(g)x + i/ (41) 

where x is the transmit vector satisfying the total power constraint and ni , . . . , njx , v are mutually 
independent AWGN with co variance I. We assume that the K + 1 vectors hi , . . . , hjx , g of length L + 1 
are linearly independent and perfectly known to all the terminals. As an extension of the frequency- 
selective BCC in Section JIJ we say that the rate tuple (Rq, R±, . . . , Rk) is achievable if for any e > 
there exists a sequence of codes (2 nRo , 2 nRl , . . . , 2 nRk ' , n) such that 

Pe < e (42) 

V R k - -H(W x \Z n ) < e, XC{1,...,K} (43) 
* — ' n 

where we denote W% = {Vfc € %, W k } and define 

Pe = uK 1 E E Pr(uf =1 (4 fe) ,^)/(^0,^)). (44) 

An achievable secrecy rate region (i?i,i?2) for the case of K = 2, when the transmitter sends two 
confidential messages in the presence of an external eavesdropper, is provided in [25, Theorem 1]. This 
theorem can be extended to an arbitrary K while including the common message. Formally we state the 
following lemma. 

Lemma 3: An achievable rate region of the i^+l-user BCC, where the transmitter sends K confidential 
messages intended to the first K receivers as well as a common message to all users, is given as a union 
of all non-negative rate-tuple satisfying 

#0 < ram{I{U;Z),mmI(U;Y k )} 

k 

Rk < I(V k ;Y k \U)-I{V k ;Z\U), k = l,...,K 

\x\ 

E^ ^ E^^fei^-E 1 ^);^!)'---'^-!)!^)- 1 ^;^^)' 

fce3C keoc j=2 



VOCC {l,...,ir},V7r (45) 

where it denotes a permutation over the subset X, \JC\ denotes the cardinality of JC, we let V% = {V7c € 
DC, V k }, and the random variables U, V\, . . . , Vk, X, Y\, . . . , Yk, Z satisfy the Markov chain 

U,Vi,...,V K ^X^Y u ...,Y K ,Z. (46) 
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Proof: Appendix HTT1 □ 
Notice that the second term of the last equation in (|45T ) can be also expressed by 

|3C| 

E 7 ^0'); K(i), ■ ■ • . Krfj-i)|E0 = E - H(V X \U). VXQ{1,...,K},W 

It can be easily seen that without the secrecy constraint the above region reduces to the Marton's achievable 
region for the general A'-user broadcast channel [35]. 

In order to focus on the behavior of the region in the high SNR regime, we define the s.d.o.f. region 

as 

r ° = i im r~^' rk = J im r~^' k = i,...,K 

P^oo log P P^oa log P 

where r$ denotes the d.o.f. of the common message and denotes the s.d.o.f. of confidential message 
k. As an extension of Theorem we have the following s.d.o.f. region result. 

Theorem 4: The s.d.o.f. region of the A+l-user frequency-selective BCC (|40T > is a union of (ro, r\ , . . . , Tk) 

■j^z(lo, Ix,---Jk) satisfying 

K 

J><£ ( 47 ) 

k=l 

K 

h + Y, l k< N ( 4§ ) 

k=l 

where {/ , l\, ■ ■ ■ , Ik} are non-negative integers. The Vandermonde precoding achieves this region. 

Proof: Appendix [IVJ □ 
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Fig. 5. Equivalent MIMO interpretation for three-user frequency-selective BCC with two confidential messages. 



Fig. H] illustrates the region (Zrj, h, fo) for the case of K = 2 confidential messages. It can be easily seen 
that the constraint (l48l) in terms of the total number of streams for the virtual receiver yields the subspace 
C,Bi,B2 while the s.d.o.f. constraint ( |47T ) for the virtual receiver yields the subspace A\, A2, B2, B\. 
We remark that for the special case of one confidential message and one common message (K = 1), the 
region reduces to Fig. [3] 

Remark 4.1: When only the K confidential messages are transmitted to the K intended receivers 
in the presence of the eavesdropper, the s.d.o.f. region has the equivalent MIMO interpretation [36]. More 
specifically, the frequency-selective BCC (|40T > is equivalent to the MIMO-BCC where the transmitter with 
N + L dimensions (antennas) sends messages to K receivers with N antennas each in the presence of the 
eavesdropper with N antennas. The secrecy constraint (orthogonal constraint) consumes N dimensions 
of the channel seen by the virtual receiver and lets the number of effective transmit antennas be L. The 
resulting channel is the MIMO-BC without secrecy constraint with L transmit antennas and K receivers 
with N antennas each, whose multiplexing gain is min(L, KN) = L (we assume L < N). Fig. [5] 
illustrates the example with K = 2, iV = 4, L = 2. 

B. Two-user BCC with two confidential messages 

We consider the two-user BCC where the transmitter sends two confidential messages W±, W2 as well 
as one common message Wo. Each of the confidential messages must be kept secret to the unintended 
receiver. This model has been studied in [17], [18], [19] for the case of two confidential messages and 
in [20] for the case of two confidential messages and a common message. In [19], the secrecy capacity 
region of the MIMO Gaussian BCC was characterized. The received signal at receiver 1, 2 at any block 
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is given respectively by 

yi = OXhOx + n! (49) 
y 2 = 1(h 2 )x + n 2 

where x is the input vector satisfying the total power constraint and ri! , n 2 are mutually independent 
AWGN with covariance Ijy. We assume the channel vectors hi,h 2 are linearly independent. 

We say that the rate tuple (Rq, Ri, R 2 ) is achievable if for any e > there exists a sequence of codes 
(2 nRo , 2 nRl , 2 nR * , n) such that 

Pe < e (50) 

R 1 --H(W 1 \Y 2 n )<e, R 2 --H{W 2 \Y{ l )<e (51) 
n n 

where we define the average error probability as 

P e= u 2 \ nRk E E E ^(^\W 1 )^(W0,W 1 )U(W^,W 2 )^(W ,W 2 )) (52) 

where (w^\wi), (w^ ,w 2 ) is the output of decoder 1, 2, respectively. A secrecy achievable rate region 
of the two-user BCC with two confidential messages and a common message is given by [20, Theorem 
1] 

R < mmiliU^JiU-^)} (53) 

Ri < IiVf^lU) - I(Vx;Y 2 ,V 2 \U) 

R2 < I{V 2 ;Y 2 \U) - IiV^Y^V^U) 

where the random variables satisfy the Markov chain 

U,V U V 2 ^X ^Y U Y 2 . (54) 

We extend Theorem [3] to the two-user frequency-selective BCC (l49l and obtain the following s.d.o.f. 
result. 

Theorem 5: The s.d.o.f. region of the two-user frequency-selective BCC d49l is a union of (ro, ri, r 2 ) = 
j^z(lo,h,h) satisfying 

l k <L, k = 1,2 (55) 
lo + h<N, k = 1,2 (56) 
where {/o, Zi, / 2 } are non-negative integers. The Vandermonde precoding achieves the region. 
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Fig. 6. s.d.o.f. region (lo,h, h) over N + L dimensions of K — 2-user frequency-selective BCC. 
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Fig. 7. Equivalent MIMO interpretation for the two-user frequency-selective BCC with two confidential messages. 



Proof: Appendix [VlJ □ 
Fig. [6] represents the s.d.o.f. region (Zo, Zi, ^2) over N + L dimensions of the two-user frequency- 
selective BCC. The per-receiver s.d.o.f. constraints (I55T ) yield the subspace A\,B\,E, F for user 1 and 
the subspace A2, B2, E, F for user 2. The constraints (l56l ) in terms of the total number of streams per 
receiver yield the subregion C,Bi,E for user 1 and the subregion C,B2,E for user 2. For the special 
case of one confidential message and one common message, the region reduces to Fig. [3] 

Remark 4.2: Comparing Theorems 14151 as well as Figs. 14161 for K = 2, it clearly appears that the 
s.d.o.f. of K + 1-user BCC with K confidential messages is dominated by the s.d.o.f. of JT-user BCC 
with K confidential messages. In other words, the s.d.o.f. region critically depends on the assumption 
on the eavesdropper(s) to whom each confidential message must be kept secret. 
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Remark 4.3: When only two confidential messages are transmitted in the two-user frequency- 
selective BCC, the set of the s.d.o.f. has the equivalent MIMO interpretation [36]. More specifically, 
the frequency-selective BCC d40l ) is equivalent to the MIMO-BCC where the transmitter with N + L 
dimensions (antennas) sends two confidential messages to two receivers with N antennas. The secrecy 
constraint consumes N dimensions for each MIMO link and lets the number of effective transmit 
antennas be L for each user. The resulting channel is a two parallel L x N point-to-point MIMO channel 
without eavesdropper. Notice that the same parallel MIMO links can be obtained by applying the block 
diagonalization on the MIMO-BC without secrecy constraint [36]. In other words, the secrecy constraint 
in the BCC with inner eavesdroppers is equivalent to the orthogonal constraint in the classical MIMO-BC. 
Fig. |7] shows the example with N = 4, L = 2 and K = 2 confidential messages. 



In order to examine the performance of the proposed Vandermonde precoding, this section provides 
some numerical results in different settings. 

A. Secrecy rate vs. SNR 

We evaluate the achievable secrecy rate RJ in (l33l when the transmitter sends only a confidential 
message to receiver 1 (without a common message) in the presence of receiver 2 (eavesdropper) over 
the frequency-selective BCC studied in Section |III] 

a) MISO wiretap channel: For the sake of comparison (albeit unrealistic), we consider the spe- 
cial case of the frequency-selective wiretap channel when receiver 1 has a scalar observation and the 
eavesdropper has N observations. This is equivalent to the MISO wiretap channel with the receiver 1 
channel h € £, lx ( N + L ) anc [ the eavesdropper channel T(g) £ £. Nx ( N + L ) _ Without loss of generality, we 
assume that the observation at receiver 1 is the first row of T(h). We consider that all entries of h, g are 
i.i.d. ~ Ne(0, xtt) an d average the secrecy rate over a large number of randomly generated channels 
with N = 64, L = 16. In Fig. [U we compare the optimal beamforming strategy [10], [14], [13] and the 
Vandermonde precoding as a function of SNR P. Since only one stream is sent to receiver 1, the s.d.o.f. 
is N \ L . In fact, the MISO secrecy capacity in the high SNR regime is given by 



V. Numerical Examples 




(57) 



where <f> G C (7V+L) 



is the beamforming vector. The Vandermonde precoding achieves 




(58) 
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where vi j denotes the z-th column of Vi G (£(N+L)xL or thogonal to T(g). Clearly, there exists a constant 
gap between (l57T ) and (l58l ) due to the suboptimal choice of the beamforming vector. 

b) MIMO wiretap channel: We consider the frequency-selective wiretap channel with N = 64, L = 
16. Although there exists a closed-form expression under a power-covariance constraint [15], the secrecy 
capacity under a total power constraint in (TTTb is still difficult to compute (especially for a large dimension 
of iV and L) because it requires a search over all possible power covariances constraints. Therefore, 
in Fig. |9j we compare the averaged secrecy rate achieved by the generalized SVD scheme [5] and the 
Vandermonde precoding. We assume that all entries of h, g are i.i.d. ~ 3sf e (0, jA^). For the Vandermonde 
precoding, we show the achievable rate with waterfilling power allocation (l33l) and equal power allocation 
(l36l) by allocating p = W+ME. to L streams. As observed, these two suboptimal schemes achieve the 
same s.d.o.f. of N ^_ L = | although the generalized SVD incurs a substantial power loss. The result agrees 
well with Theorem [3] We remark also that the optimal waterfilling power allocation yields a negligible 
gain. 

B. The maximum sum rate point (Rq,Ri) vs. SNR 

We consider the frequency-selective BCC with one confidential message to receiver 1 and one common 
message to two receivers. In particular, we characterize the maximum sum rate-tuple corresponding to 
7o = 7i on the boundary of the achievable rate region !R S . Fig. [10] shows the averaged maximum sum 
rate-tuple (Rq , R\ ) of the Vandermonde precoding both with optimal input covariance computed by the 
greedy algorithm and with equal power allocation. We remark that there is essentially no loss with the 
equal power allocation. 

C. Two-user secrecy rate region in the frequency-selective BCC 

We consider the two-user frequency-selective BCC where the transmitter sends two confidential mes- 
sages (no common message) of Section ITV-B I For the sake of comparison (albeit unrealistic), we consider 
the special case of one observation N = 1 at each receiver. Notice that the two-user frequency-selective 
BCC is equivalent to the two-user MISO BCC with hi,h2 € C lx ^ i+1 ^ whose secrecy capacity region 
is achieved by the S-DPC scheme [18]. The proposed Vandermonde precoding achieves the secrecy rate 
region given by all possible rate-tuples (i?i,i?2) 

Ri < T 1 : log(l +Pi max |hiv M | 2 ) 
L + 1 i=l,...,L 

R2 < T 1 : log(l +P2 max |h 2 v 2 ,i| 2 ) 
L + 1 i=l,...,L 
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satisfying p\ +P2 = (L + 1)P where vi^, \2,i denotes the i-th column of Vi G q( n + l ) xL orthogonal to 
ti2, V2 G (£(N+L)xL orthogonal to hi, respectively. Fig. [TT] compares the averaged secrecy rate region 
of the Vandermonde precoding, zero-forcing beamforming, and the optimal S-DPC scheme for L = 5 
where all entries of hi,ri2 are i.i.d. ~ Ne(0, ). As observed, the Vandermonde precoding achieves 
the near-optimal rate region. As the number of paths L increases, the gap with respect to the S-DPC 
becomes smaller since the Vandermonde precoding tends to choose the optimal beamformer matched to 
the channels. 

VI. Conclusions 

We considered the secured communication over the frequency-selective channel by focusing on the 
frequency-selective BCC. In the case of a block transmission of N symbols followed by a guard interval of 
L symbols discarded at both receivers, the frequency-selective channel can be modeled as a N x (N + L) 
Toeplitz matrix. For this special type of MIMO channels, we proposed a practical yet order-optimal 
Vandermonde precoding which enables to send / < L streams of the confidential messages and N — I 
streams of the common messages simultaneously over a block of N + L dimensions. The key idea here 
consists of exploiting the frequency dimension to "hide" confidential information in the zeros of the 
channel seen by the unintended receiver similarly to the spatial beamforming. We also provided some 
application of the Vandermonde precoding in the multiuser secured communication scenarios and proved 
the optimality of the proposed scheme in terms of the achievable s.d.o.f. region. 

We conclude this paper by noticing that there exists a simple approach to establish secured commu- 
nications. More specifically, perfect secrecy can be built in two separated blocks ; 1) a precoding that 
cancels the channel seen by the eavesdropper to fulfill the equivocation requirement, 2) the powerful off- 
the-shelf encoding techniques to achieve the secrecy rate. Since the practical implementation of secrecy 
encoding techniques (double binning) remains a formidable challenge, such design is of great interest 
for the future secrecy systems. 
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Appendix I 
Proof of Lemma [T] 

In this appendix, we consider the rank of T(h)Vi where Vi satisfies the orthogonality T(g)Vi = 0. 
By letting v^j denote the i-th column of Vi we have Vi = [vi 1, . . . ,vi^] for the case of I = L. We 
define the matrix G orthogonal to Vi by appending L — I rows v^ +1 , . . . , to 1(g) 

7(g) 
v l,i 

Notice that all N + L — I rows are linearly independent. By definition of Vi, it is not difficult to see 
that G and form a complete set of basis for a N + L-dimensional linear space. Indeed for I = L 
the matrix G reduces to 7(g), while I < L, a subset of a projection matrix onto the null space of T(g) 
are appended to T(g). Hence T(h) can be expressed as 



7(h) = H G + H x 



AG + BVf 



(59) 



where Hg is the projection of 7(h) onto the row vectors of G with aJVx (N + L — 1) coefficient matrix 
A, Hy is the projection of 7(h) onto the row vectors of Vi with a N x I coefficient matrix B. 



rank(T(h)V! 



rank((AG + BVf )Vi) 



(a) 



rank(B) 

(b) r i 



rank(BVf ViB H ) = rank(H y 



(c) 



/ 



where (a) follows from the orthogonality GVi = and V^Vi = I/, (b) follows from rank(BB 



rank(B). The equality (c) is obtained as follows. We notice 



rank 



Hy 
G 



(d) 



rank 



Hy + He 

G 



= rank 


" 7(h) ' 




G 



(e) 



min(JV + L, 2N + L - I) = N + L (60) 



where in (d) adding He does not change the rank, (e) follows because any set of N + L rows taken 
from T(h),G are linearly independent (from the assumption that h, g are linearly independent). Since 
Hy is orthogonal to G, d60l yields 

rank(Hy) = N + L - (N + L - I) = I 



which establishes (c). 
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Appendix II 
Proof of Theorem [2] 

We consider the following three cases given in Lemma [2] 

Case 1 Supposing i?oi < R02, we consider the objective function fi in d24l ). The objective is concave 
only when 71 > 70. Nevertheless, we consider the KKT conditions which are necessary for the optimality. 
It can be easily shown that the KKT conditions are given by (l28l) and d29l ) where y is the Lagrangian 
dual matrix associated to the positive semidefmiteness constraint of Sj for i = 0, 1 and /i > is the 
Lagrangian dual variable associated to the total power constraint. It clearly appears that for 71 > 70 the 
objective is concave in So, Si and the problem at hand is convex. In this case, any convex optimization 
algorithm, the gradient-based algorithm [37] for example, can be applied to find the optimal solution 
while the algorithm converges to a local optimal solution for 71 < 70- 

Case 2 : Supposing R02 < R01, we consider the objective function in (|25T ). Since the problem 
is convex (/2 is concave and the constraint is linear in So, Si), the KKT conditions are necessary and 
sufficient for optimality. We form the Lagrangian and obtain the following KKT conditions 

G + *0 = ^N+L-l 

7 iHf (Lv + HiSiHf ) _1 Hi + * = 
tr(S )+tr(Si) = P 
tr(*iSi) = 0, i = 0,l 

where \I/j y is the Lagrangian dual matrix associated to the positive semidefmiteness constraint of 
Sj for i = 0, 1 and \x > is the Lagrangian dual variable associated to the total power constraint. By 
creating N parallel channels via SVD on Go, Hi in d27l) . we readily obtain the solution (l30l ). 

Case 3 For < 9 < 1, we consider the objective function in (f26b . In the following we focus on 
70 > 0. Notice that if 70 = we have Rqi = i?02 = which yields the corner point (0, R\ dm ) where 
i?[ dm denotes the secrecy rate characterized in (l33l) . The KKT conditions, necessary for the optimality, 
are given by (|3~TI ) and (l32l where y is the Lagrangian dual matrix associated to the positive 
semidefmiteness constraints for i = 0, 1 and \x > is the Lagrangian dual variable associated to the 
total power constraint. The gradient-based algorithm [37] can be applied to find the solution satisfying 
these KKT conditions. Although this algorithm yields the optimal and unique solution for 71 > 70$, the 
algorithm converges to a local optimal solution for 71 < 70$. 
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Appendix III 



Proof of Lemma [3] 



This section provides the achievability proof of the region (|45T ). We extensively use the notation 
A{ (Px s y) to denote a set of jointly typical sequences x, y of length n with respect to the distribution 
P(x,y). We let e > which is small for a large n. 

a) Codebook generation: Fix P(u), P{v\ \u), . . . , P(vk\u) and P(x\u, V\, . . . , vjc). The stochastic 
encoder randomly generates 

• a typical sequence u(wq) according P(u n ) = Y11 =1 P(ui) where wq € {1, . . . , 2 n ( R °~^} 

• for each u n and k = 1, . .. ,K, 2 n ^ I ^ Vk '' Yk \ u ^>~'^ i.i.d. codewords Vk(w k ,jk) each with P(v£|u n ) = 
nr=i P( v k \ u i)> where the indices are given by 



Next, distribute the 2 n< - I ( Vk ' Yk \ u ^ codewords into 2 nRk bins such that each bin contains 2 n< - I ( Vk ' Z \ u ^ 
codewords. 

b) Encoding: To send the messages wq,w\, . . . ,w k , we first choose randomly the index wq and 
the corresponding codeword u(wo). Given the common message u(u>o) and randomly chosen K bins 
wi, . . . , wk, the encoder selects a set of indices ji, . . . , jk such that 



If there are more than one such sequence, it randomly selects one. Finally the encoder selects x according 
to P{x\vi, . . .,V K )- 

c) Decoding: The received signals at the K legitimate receivers are y™, ... , y\, the outputs of the 
channels P(y£|x n ) = YYi=i P{Vk\ xn ) f° r anv Receiver k first chooses such that 



w k € {1 




(u(ioo), vi(wi,ji), . . . ,v K (w K ,ji<)) G A[ n \P uyu ,„y K ) 



(61) 



(62) 



if such a w. 



n 



exists. Then, for a given Wq it chooses w k so that 



(u{w%),v k (w k ,j k ),y k ) G A^{Puy kXk ) 



(63) 



if such Vfc exists. 
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d) Error probability analysis: Without loss of generality, we assume that the message set is wq = 
w\ = ■ ■ ■ = w k = 1. We remark that an error is declared if one or more of the following events occur. 

• Encoding fails 

,V U ...,V K )}- ( 64 ) 

From [38] we have P(Ei) < e, if 

K K K 

E ^ E w - E I( y*v)> y -(D' • • • - v <o-v\ u ) - J (yi,..., v K - z\u) (65) 

k=l k=l j=2 

• Decoding step 1 fails ; there does not exist a jointly typical sequence for some k, i.e. 

El ± {(u(l),v fc (l, ji),y fc ) i A[ n \P uyk , Yk )}. (66) 

From joint typicality [39] we have P(-E|) — 6 f° r anv k- 

• Decoding step 2 fails ; there exits other sequences satisfying the joint typicality for some k 

El i Mw ,w k ) + (M)>(V>,v fc K,ii),y fe ) G A(»)(iV,v fc ,yJ}- (67) 
From [38] we have ) < e if < /(F fc ; Y k \U) - I(V k ; Z\U) - e for any fc. 

Hence, the error probability P e (n) = P{E\ \J(U k E 2k ) U( u fc£3fc)) < e if the rate-tuple satisfies (??). 

e) Equivocation calculation: To prove the equivocation requirement 

V R k - -H(W x \Z n ) < -, XC{1,...,K} (68) 

fceac 
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we consider H(W x \Z n ) where we denote W x = {Wk,k 6 OC}. Following the foot steps as the proof 
of [25, Theorem 1], we have 

H(W x \Z n ) > H(W x \Z n ,U n ) 

= H(W x ,Z n \U n ) - H{Z n \U n ) 

= H(W X , V£, Z n \U n ) - H(V$\W X , Z n , U n ) - H(Z n \U n ) 

= H(W X , V£\U n ) + H(Z n \W x , V£, U n ) - H(V$\W X , Z n , U n ) - H(Z n \U n ) 

(b) 

> H(W X , V£\U n ) + H(Z n \W x , V£, U n ) - ne' - H(Z n ) 

( = } H(W X , V£\U n ) + H(Z n \V£, U n ) - ne' - H(Z n \U n ) 
(d) 

> H{V£\U n ) + H(Z n \V£, U n ) - ne' - H{Z n \U n ) 

= H(V£\U n ) - Z n \U n ) - ne' 

\x\ 

® E H{Vk\U n ) ~ E W W 5 ■ • • . K {j -i)\U n ) - I(V£; Z n \U n ) - ne' 

k£X j=2 
(f) |3C| 

> E W; Y *\ un ) - E Woo; - . ^Vi)l^ n ) - - ^ 

fcGX j=2 



> n E R k 

k&X 

where (a) follows because the conditioning decrease the entropy, (b) follows from Fano's inequality [39] 
stating that for a sufficiently large n we have 

H(y£\w x , z\ U n ) < 1 + nPjl E ^ z \ u ) ^ ™' 

kex 

(n) 

where P e ;eav denotes the eavesdropper's error probability when decoding V3 with side information on 
W x at the rate YlkeX^i^k'i Z\U). It can be easily shown that P^elv —>■ as n — > oo. (c) follows from the 
Markov chain W x — > V^- — > Z n , (d) follows by ignoring a non-negative term H(W X \V3), (e) follows 

because H(V£\U n ) = £ fceac # ( W*) " Ei=2 ^(^) ; y ™(D' ' ' ' ' ^Vd^ for any P ermutation * 
over the subset X, (f) follows because H{V^\U n ) > I{V£;Y™\U n ) for any k. 

Appendix IV 
Proof of Theorem H] 

The achievability follows by extending Theorem [3] to the case of K confidential messages. First we 
remark that as a straightforward extension of Lemma Q] the following lemma holds. 
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Lemma 4: For J2 k =i < L, there exists a matrix [Vi, . . . , V^] with X^fcLi l k orthonormal columns 



with size N + L satisfying 



7(g)V fc = 



k = h 



K 



(69) 
(70) 



rank T(h fe )(^ V, Vf )T(h fc ) ff 

where l k denotes the number of columns of V^. 
A sketch of proof is given in Appendix |V] 

We let Vo be unitary matrix with N + L — ~}2 k=1 h orthonormal columns in the null space of 
[Vi , . . . , ~Vk] such that [Vi , . . . , V^-] = 0. In other words, the Vandermonde precoder V = [Vo , . . . , V^] 
is a squared unitary matrix satisfying ~VV H = In+l- Based on the Vandermonde precoder V, we 
construct the transmit vector x as 

K 

x = ^V fc u fc (71) 



k=0 

where u , u 1? . . . , u^- are mutually independent Gaussian vectors with zero mean and covariance So, Si, . . . 
satisfying X^£o tr (^') — {N + L)P. From the orthogonality properties (|69l , the received signals become 

y k = TChfcJVoUo + TChOVfcUfc + ^hfcJ^VjUj+nfc, k = l,...,K 
z = T(g)V u + v 

where receiver k observes the common message, the intended confidential message, and the interference 
from other users, while receiver K + 1 observes only the common message. By letting U = Vouo, 
Vk = U + VfcUfc for k = 1, . . . , K, X = U + Y^k=i and considering the equal power allocation to all 
N + L streams, we readily obtain 

\I N + P7(h k ) (Ef =0 Vj Vf ) 7(h k ) H 



I(U;Y k ) 

I(U;Z) 

I(V k ;Y k \U) 
I(V X ;Z\U) 



N + L l ° g | Iiv + p 7{hk) V . V ^ 7{hk) H\ 

1 



N + L 

1 

N + L 



log \I N + P7(g)V V^7(g) 



log 



I^ + PT(h fc )(£f =1 V^f)T(h fc ) 



I N + P7(h k )(£f =1 ^ k VjVf )7(h k ] 



H 



yk 



0, VOCC {!,..., K} 



(72) 

(73) 

(74) 
(75) 



>K 
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and we also have H(Vx\U) = X^fcex-^X^I^O fr° m tne independency between V±, . . . , Vk conditioned 
on U. Plugging this together with d74l ) and (|75T ) into (|45T ). we have 

R k <I(V k ;Y k \U), k = l,...,K 

k£X hex 
In order to find the d.o.f. region, we notice 

rank(T(g)V V^(g) H ) = rank(7(g)V ) 

(a) 



(b) 



rank(7(g)[VoVi,...,VA:]) 
rank(T(g)) = N (76) 



K 



rank [ T(h fc )(^V,Vf)T(h fc ) H ] = rank(T(h fc )VV^(h fc ) H ) 

j=0 



(b) 



rank(T(h fe )) = iV (77) 



(X \ K 

T(h fc )(^V,Vf)T(h fe ) ff ( = } ^ (78) 
i=i / i=i 

(A' \ K 

7(h k )( ^ V/Vf)T(h fc ) H ( = } l i ^ 

where (a) follows from orthogonality between T(g) and for k > 1, (b) follows from the fact that 
V = [Vo . . . Vjf] is unitary satisfying VV^ = I, and (c) follows from Lemma |4] From (1771 ) and (|78T ). 
we readily obtain tq < — n+l k » wrnc h i s dominated by £76]). Combining (1781 ) and d79l ), we obtain 
r& < for = 1, . . . , K. This completes the achievability. 

The converse follows by a natural extension of Theorem [3] to the K + 1-user BCC. To obtain the 
constraint (|47j ), we consider that the first K receivers perfectly cooperate to decode the K confidential 
messages and one common message. By treating these K receivers as a virtual receiver with KN 
antennas, we immediately obtain the bound (l47l ) corresponding to the s.d.o.f. of the MIMO wiretap 
channel with the virtual receiver channel [T(hi) T , . . . ,7{\ik) T ] T and the eavesdropper channel 7(g). 
The bound (l48l is obtained by noticing that the total number of streams that receiver k can decode is 
limited by the d.o.f. of T(hfe), i.e. N. Namely, we have the following K inequalities 

lo + h<N, k = I, . . . , K (80) 

which yields Iq < N — max/; l k . Further by letting l k = L for any k G {1, . . . , K } and and lj = for 
any j ^ k, we obtain Iq < N — L. Adding the last inequality and (147b . we obtain (l48l . This establishes 
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the converse. 

Appendix V 
Proof of Lemma H] 

We consider rank(T(h fc ) Ejeac v i v f 7(h k ) H ) for a subset % C {1, . . . , K }. First we let v C) i, . . . , v CjL 
denote L orthonormal columns that form a unitary Vandermonde matrix orthogonal to T(g). For any 
subset XL C {1,...,L}, we let V C) £ be the unitary matrix formed by |XL| columns corresponding to 
the subset XL taken from v Cj i, . . . , v Cj x,. Since a unitary matrix formed by {V k }kex for any % can be 
expressed equivalently as V c £, we consider rank(T(h/ c )V c ^V^ c T(hfc) ff ). For a given XL, we let V c ^ 
denote a unitary matrix composed by L — |XL| columns corresponding to the complementary set XL such 
that XL + XL = {1, . . . ,L}. In order to derive the rank, we follow the same approach as Appendix U We 
define the matrix € c (Ar+L_l ' c|)x(Ar+L) orthogonal to V cL by appending to T(g) 



cX 



where the N + L — |XL| rows are linearly independent. Since and form a complete set of a 
N + L-dimensional linear space, T(hfc) can be expressed as 

7(h k ) = A ktC G z + B kt£ y% c , k = l,...,K (81) 

where A^^, is a coefficient matrix with dimension N x (N + L — |XL|), x |XL| respectively. By 
recalling that any set of N + L rows taken from T(hfc), 7(g) axe linearly independent for k = 1, . . . , K 
(from the assumption that g, hi , . . . , hjc are linearly independent), we can repeat the same argument as 
Appendix U and obtain 

rank(T(h fc )V Ci ^V^T(h fe ) H ) = |XL|, VXL C {1, . . . , L},k = 1, . . . , K 

which yields the result. 

Appendix VI 
Proof of Theorem [5] 

The achievability follows by generalizing Theorem [3] for the case of two confidential messages. We 
remark that by symmetry Lemma Q] for one beamforming matrix Vi can be trivially extended to two 
beamforming matrices Vi and V2. Namely, we have 
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Lemma 5: For h < L and l 2 < L, there exists with l k orthnormal columns for k = 1, 2 satisfying 

T(h fe )V, =Ojv xt ., fc = l,2,j^fc (82) 

rank(T(h fc )V fc ) = A; = 1,2 (83) 
Further, we let V be a unitary matrix with M = N + L — rankQVxV^) orthonormal columns in 
the null space of [V1V2] such that Vq^[ViV 2 ] = OMxth+h)- We construct x by Gaussian superposition 
coding based on the the Vandermonde precoder Vo, Vi and V2. From (f82~l ). each user observes the vector 
of its confidential message and that of the common message, i.e. 

yi = T(hi)(V u + Viui) + ni (84) 

y 2 = T(h 2 )(V u + V 2 u 2 ) + n 2 

By letting U = Vouo, Vt = U + VfcUfc for k = 1, 2, X = Vi+V 2 and considering equal power allocation 
to all streams with p = j^qj^^ , we readily obtain 

I{u . Yk) = 1 lQg I'iV +pT(h fe )(V V g + V fc Vf )7(h k ) H \ 



We remark 



N + L b |I^+pT(h fc )V fc VfT(h fc )^ 
I(V k ;Y k \U) = ^l^loglljv + p^h^VfcVfTCh*^! 
I{Vr,Y 2 ,V 2 \U) = I(V 2 ;Y 1 ,V 1 \U) = 



rank(T(h fc )V fc VfT(h fc )^) = rank(T(h fe )V fe ) = l k , k = 1,2 



Vf 



rank(T(h fc )(V V^ + V fc Vf)T(h fc ) H ) = rank ^T(h fc )[V V fc 

( = } rank(T(h fc )[V V fe V J ]) 
{ = } rank(T(h fc )) = N 

where (a) follows from orthogonality between T(hfc) and Vj for j ^ k, (b) follows because [VoViV 2 ] 
or [VoV 2 Vi] spans a complete N + L-dimensional space. These equations yield lo+h < N for k = 1, 2. 
This establishes the achievability. 

The converse follows by noticing that the constraints (I55T ) and (l56l ) correspond to trivial upper bounds. 
To obtain (|55T ). we consider the special case when the transmitter sends only one confidential message 
to one of two receivers in the presence of the eavesdropper. When sending one confidential message 
to receiver 1, the two-user frequency-selective BCC reduces to the MIMO wiretap channel with the 
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legitimate channel T(hi) and the eavesdropper channel T(h.2), whose s.d.o.f. is upper bounded by L. 
The same bound holds for receiver 2 when transmitting one confidential message to receiver 2 in the 
presence the eavesdropper (receiver 1). The upper bounds d56l ) follow because the total number of streams 
per receiver is limited by the individual (N + L) x N MIMO link. This establishes the converse. 
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Fig. 11. Achievable secrecy rate region AT = 1, L = 5 (MISO-BCC). 
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